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ABSTRACT 



A drop safe for receiving and temporarily storing currency 
or other valuables from a cash register or poii 
terminal. The drop safe uses bill acceptors to transfer cash 
into sealed cassettes within the safe. An envelope drop 
assembly allows transferring into the safe currency or non- 
cash items not accepted by the acceptor. The drop safe door 
has a door control assembly including a gas spring to 
counterbalance the weight of the door for controlled move- 
ment during opening. The door is locked by a pair of door 
bolts linked to a lock cam, which is secured by a dead bolt 
against movement. An electronic control unlocks the dead 
bolt in response to entry of correct numbers, allowing a 
rotary dial of the outside of the safe to move the lock cam 
and release the door bolts. The drop safe includes a proces- 
sor programmed to control the unlocking operation and to 
maintain and produce various reports of deposits into the 
safe, enabling easy correlation of those deposits with 
business-day operation of the drop safe. 

9 Claims, 11 Drawing Sheets 
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DROP SAFE 

This is a division of application Ser. No. 08/506,021, 
filed Jul. 24, 1995 status: now U.S. Pat. No. 5,695,038. 

FIELD OF THE INVENTION 

This invention relates in general to apparatus for securing 
currency or other valuables, and relates in particular to drop 
safes intended for temporary secure storage of currency 
awaiting transfer to another location. 

BACKGROUND OF THE INVENTION 

Retail sales outlets such as convenience stores and gas 
stations often receive a significant volume of cash receipts 
and need to secure those receipts from robbery or theft on 
the premises. Many such outlets, particularly those antici- 
pating a high volume of cash receipts throughout their times 
of operation, contract with an armored-car service to pick up 
the receipts from the premises. Those services typically 
transport a merchant's receipts to a central location where 
the currency is counted, and then deposits the currency in a 
bank account for the benefit of the merchant. By thus 
arranging for periodic cash pickups, the reduced amount of 
cash remaining at the retail facility may present a less- 
inviting target for robbers and reduces the amount of money 
at risk if a robbery does take place. 

Although armored-car pickups or other periodic cash 
deposits will reduce the maximum amount of currency on 
the premises, many retail sales establishments still prefer to 
maintain a relatively secure location for storing currency 
while awaiting pickup or deposit. This need is particularly 
desirable for facilities such as convenience stores, gas 
stations, and other facilities having substantial receipts in 
cash or other negotiables, and remaining open around the 
clock with little or no staff apart from the cashiers on the 
premises. Those cashiers close out their cash registers or 
other point-of-sale terminals at the end of their shifts, and 
usually transfer the receipts to a secure location within the 
premises for subsequent pickup or deposit. However, cash- 
iers often are encouraged or instructed to remove currency 
from their cash drawers from time to time during a shift, to 
reduce the amount of money at risk if a robbery occurs. This 
removed currency likewise is transferred to a relatively 
secure location on the premises, awaiting pickup. In most 
retail facilities, it is desired to segregate the cash receipts for 
which each cashier is responsible, so as to maintain personal 
accountability for the cash removed from their cash drawers. 

The conventional safe, equipped either with a combina- 
tion lock or a key lock, is one possible secure location for 
temporarily storing currency awaiting pickup from a retail 
facility or other location. The obvious disadvantage of the 
conventional safe in that environment, however, is that the 
cashier or other store personnel must know the combination 
or have a key that opens the safe, in order to make periodic 
transfers of currency into the safe. That requirement signifi- 
cantly diminishes the benefit of transferring currency from 
cash registers to the safe, because an armed robber may 
coerce the store personnel into opening the safe. 

So-called drop safes have become known in the art, to 
overcome the security problems associated with using a 
conventional safe for temporary storage of currency. A drop 
safe typically has a slot into which the cashiers may insert 
an envelope containing currency removed from the cash 
drawers during or at the end of each shift. The combination 
or key required for opening the safe is not available to 
anyone on the premises; only the armored-car personnel or 
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the store manager can open the safe. An armed robber thus 
can, at most, steal only the currency in the cash drawers at 
the time. Moreover, cashiers must remember to transfer 
currency to the drop safe at certain times or upon checking 
5 cash-drawer receipts to see whether currency on hand 
exceeds some set amount. Although conventional drop safes 
thus are an improvement over the conventional safe for 
temporary secured storage of currency, such safes still 
require each cashier to place receipts in a separate envelope, 
10 preferably marked with the cashier's name, before placing 
the currency into the drop slot of the safe. The cashier or 
store manager also must keep a log showing the amounts 
deposited and the name of the person making each deposit. 
That procedure is time-consuming and thus may not be 
15 followed, especially by cashiers who must serve a steady 
volume of customers. 

Accordingly, it is an object of the present invention to 
provide an improved drop safe for receiving currency or 
other valuables. 
20 It is another object of the present invention to provide a 
drop safe that can automatically inspect currency presented 
for deposit, accept and count those bills that meet a prede- 
termined minimum standard of quality, and reject those bills 
that fail to meet the quality standard. 

It is a further object of the present invention to provide a 
drop safe that maintains a running tally of currency accepted 
for deposit into the safe. 

It is still another object of the present invention to provide 
30 a drop safe that permits the manual deposit of rejected bills 
or other items not acceptable or readable by a currency 
acceptor mechanism. 

It is another object of the present invention to provide a 
drop safe having a manual drop for envelopes or tie like in 
35 addition to one or more currency acceptors for transferring 
currency into the safe. 

It is still another object of the present invention to provide 
a drop safe having an improved locking mechanism. 

It is yet a further object of the present invention to provide 
40 a drop safe having an improved mechanism for controlling 
the opening of a door to the safe. 

It is still another object of the present invention to provide 
a drop safe that can identify and count currency placed in the 
45 safe by several persons or at different times. 

It is a further object of the present invention to provide a 
drop safe in which currency placed into the safe becomes 
disposed in at least one separate removable container within 
the safe. 

50 It is still another object of the present invention to provide 
an improved drop safe that interacts with a point-of-sale 
terminal. 

Other objects and advantages of the present invention will 
become more readily apparent from the following descrip- 
55 tion of the invention arid the preferred embodiment thereof. 

SUMMARY OF THE INVENTION 

Stated in general terms, the present drop safe comprises a 
secure housing intended for mounting near a location of cash 

60 transactions, such as a point-of-sale (POS) terminal or a 
conventional cash register. At least one bill acceptor is built 
into the drop safe, preferably mounted on a lockable door for 
accessing the interior compartment within the safe. Each bill 
acceptor scans the currency or other selected bills presented 

65 for acceptance, and accepts all proffered bills except those 
that fail to meet a predetermined minimum level of accept- 
ability. A microprocessor associated with the drop safe 



09/29/2003, EAST Version: 1.04.0000 



5,975,275 

3 4 

receives data signals from the drop safe concerning the are withdrawn by the locking mechanism. A door control 

denominations of accepted currency, so as too record the assembly counterbalances the weight of the door, permitting 

amounts deposited into the safe and to provide reports of a gradual controlled opening when the locking mechanism 

those deposits over selected intervals. withdraws the door bolts. This door control assembly elimi- 

Stated in somewhat greater detail, the drop safe of the 5 nates the need for pull handles or the like on the outside of 

present invention includes a microprocessor controlled to me door, which might otherwise be used in an unauthorized 

operate the bill acceptor or acceptors installed in the safe. A attempt to force open the door. 

keypad or other data entry device is connected with the A4 , , . , , , r ,, ^ ♦ »■ *n 

processor and allows persons such as cashiers or store . 0tbcr ob J ccts 0 ^ P^nt invention voll 

managers to deposit currency in the safe, indicating their in become more apparent from the following description of a 

employee or other identifying number, their work shift, and P««rrcd embodiment. 

other desired identifying information. Where an embodi- rjFSrRrPTION OP DRAWINGS 

ment of the drop safe includes two or more bill acceptors, a BRIEF DESCRIPTION OF DRAWINGS 

predetermined first acceptor may be designated for accept- piG. 1 is a pictorial view showing a drop safe according 

ing all deposits until the currency-receiving cassette of that to a pre f e rred embodiment of the present invention, 

acceptor becomes filled with a predetermined number of 15 • . • ■ ■ • iL . A e 

bills When that number is reached, the processor automati- *IG. 2 * * Pf onal V1C ^ showm S thc cmb ° d "™ Dt of 

cally disables that first acceptor and enables another accep- HG - 1 ™ thc door °P cncd - 

tor associated with the drop safe; lights or other signal FIG. 3 is a front elevation view of the embodiment shown 

devices on the exterior of the safe identify the particular in FIG. 1, partially cut away to show details of the locking 

acceptor presently enabled for use. The cassettes associated 20 mechanism. 

with each bill acceptor are periodically removed from the piG. 3A is a view as in FIG. 3, showing the locking 

drop safe by an armored-car driver or other authorized mechanism in the unlocked condition. 

service person, and replaced with empty cassettes. . . . , , . , , . .. r t . , . 

™ j r ■ , j , 1 , L . lL t FIG. 4 is an exploded view showing details of the boll 

The drop safe includes a novel lock mechanism that 1 , . ■ j- 1 , , , - 

F . ' . . J. \ t ; " , locking mechanism in the disclosed embodiment. 

requires no key or combination dial to operate. A door 25 

providing access to the drop safe is held closed by one or FIG - 5 is an enlarged exploded pictorial view showing 

more bolts that may be withdrawn by turning a dial set into details of the door control assembly in the preferred embodi- 

the front of the door. A bolt lock within the safe normally ment, 

blocks the locking mechanism, preventing the dial from FIG. 6 is an enlarged exploded view showing details of 

withdrawing the door bolts. To actuate the bolt lock and 30 the envelope drop assembly in the preferred embodiment, 

permit opening the safe, at least one and preferably two FIG. 7 is a block diagram of the control apparatus in the 

predetermined sequences of numbers must be entered into a disclosed embodiment 

keypad or other input device associated with the safe. These .„ . . . » 

numbers may include an identiacation number unique to the ? }°\ 8 >s/ "lock diagram illustrating 5 a hierarchy of menus 

store or other location of the safe, a number that usually will 35 and rela,ed functl0ns for ,he d,sclosed embod " 

not vary from day to day. After the store ID number is men ' 

entered, the armored-car service or other messenger enters FIG - 9 k a olock diagram illustrating the hierarchy of 

his or her personal identification number (PIN), which may menus ?nd related subfunctions for the supervisor functions 

change from one visit to the next, preferably in a manner as shown in FIG. 8. 

explained below. The messenger then enters the combination 40 FIG. 10 is a block diagram illustrating the hierarchy of 

of the safe itself. When the proper identification numbers menus and related subfunctions for the messenger functions 

and safe combination are entered and recognized by the showing FIG. 8. 

processor associated with the drop safe, the bolt locking FIG. 11 is a timeline illustrating an example of business 

mechanism is actuated to enable withdrawing the door bolts days and overlapping collection days for operating a drop 

by manipulating the dial on the safe door. 45 safe according to the present invention. 

The present drop safe preferably also includes a device for 

accepting currency or similar valuables separate from the DETAILED DESCRIPTION OF PREFERRED 

bill acceptors. In the preferred embodiment, this device EMBODIMENT 

takes the form of a drop mechanism for receiving envelopes FIG. 1 shows at 16 a drop safe according to a preferred 

or packets containing bills such as wrinkled or torn currency 50 embodiment of the present invention. The drop safe 16 has 

rei ected_b y_jhe j?ill a cceptors, money orders, checks, or an outer housing assembled from the side panels 17/ and 

travelers checks. This envelope drop mechanism, in a pre- \j rj a top panel 18, and a back panel. The side panels, top 

ferred embodiment of the drop safe, fits in an aperture panel, back panel, and a lower front panel 19 extending 

provided for that purpose in the door of the safe. upwardly from the bottom of the drop safe, constitute a 

Stated in more detail, the manual drop mechanism 55 housing defining an interior space 20, FIG. 2, within the 

includes a slide manually movable outwardly within the slot, drop safe. The drop safe 16 is shown mounted on a separate 

exposing a compartment having a floor on which to insert an base 23 to support the drop safe at a desired elevation above 

envelope containing currency or other valuables. When the a floor or other surface on which the base rests. By selecting 

slide is returned inwardly of the slot, the floor moves to a the height of the base 23, the overall height of the base and 

vertical position, so that the envelope falls by gravity into 60 the drop safe 16 is adjustable to fit beneath i counter or some 

the safe. This door returns to the horizontal position when other space of limited elevation. The drop safe 16 preferably 

the slide is again moved outwardly in the slot, to block direct is connected to the base 23 with bolts or other suitable 

access to the interior of the drop safe and thereby thwart fasteners accessible only from within the interior space 20. 

attempts to fish the contents of the safe through the envelope Once the base 23 is securely anchored to the floor or other 

drop assembly. 65 support structure, the drop safe 16 cannot be readily 

The door of the present drop safe is hinged at the bottom, removed from the base unless the access codes are known 

allowing that door to pivot outwardly when the door bolts for opening the door as described below. 



09/29/2003, EAST Version: 1.04.0000 



5,975,275 

5 6 

The drop safe 16 of the disclosed embodiment includes a is disengaged. Moreover, if the center of mass of the door 

data input terminal 26 with a keypad 27 for entering infor- assembly is slightly behind the hinge as aforementioned, the 

mation and a visual display 28 for displaying information to gas spring will initiate opening the door upon unlocking, 

an operator. The drop safe also includes a printer 29 for thereby obviating the need for pull handles or other structure 

printing reports or other information concerning operation 5 protruding from the front of the door, which might be used 

and usage of the drop safe. The terminal 26 and printer 29 m an efforl l0 force opeQ the locked door 

are connected to a processor 154 (FIG. 8), which is located A - . . , Ae - , . . n , 

... . . . . - n r # > . ' e * A friction washer 45 fits around the post 40a and presses 

within the interior space 20 of the drop safe for security . c . . . , f *u 1 ,m -n. 1 An 

u ui • 1 ♦ . 1 against a confronting side of the lever 40. The lever 40 

reasons, by suitable wires leading to a connector panel 30 r ui • * j * «u » u ui a .~u 

1 . j .u u j 1 r .u J c -n. . • 1 preferably is connected to the post by a suitable device such 

located on the back panel of the drop safe. The terminal 26 in c • \- \ lL t , r / , v f 

, ; Zl * v : . , 5 . , MO f 10 as a fnctiontess thrust bearing (not shown) capable of 

and printer 29 are here shown located on the top panel 18 of , . , % > . ' A % ... 

. *i . , • . , 1 L » . , pressing the lever agamst the friction washer 45 with a 

the drop safe, but it should be understood that those com- £ clcctiv * , variab , 6 ^ ount of force ^ frictional forcc 

ponents may be placed on a separate countertop or . ; , . . . - . ~ ^ . . t 

r . . C J • .u j r thus regulates the amount of manual effort required to raise 

elsewhere, for example, in installations where the drop safe j 1 ,lj i_i u £. .i_ • . j- . 

. * % • . — » .«_ r •♦• and lower the door assembly 34 from the intermediate 

is emplaced beneath a countertop or other structure limiting 1? , t . 4 , * r. • * L 

r , rt-jc 15 position, and controls the amount of bounce m the move- 
access to the top of the drop safe. r , c , , . 

. , r.i r mcnX of the door assembly. 

A door assembly 34 occupies the front or the drop safe * . ^ - i_ , 

above the lower front panel 19 and prevents unauthorized *" h . ou * a *P" n g "f «> th * discl .° sed 

access to the interior space 20. Hie door assembly includes embodiment it should be understood that other resilient 

a door panel 35 fastened at its bottom to a hinge block 36 20 elemenl f such as a te ° slOD SP™* ™ ^alternatives. The gas 

fitted at opposite ends with hinge shafts extending outwardly h ° weve '> prcmdes a controlled opening force and is 

into the adjacent sides of the drop safe. This hinge allows the P reterred tor tbat reasoD - 

door assembly 34 to pivot between a closed position shown The door assembly 34 carries apairofbih acceptors 52 

in FIG. 1 where the door panel 35 is substantially vertical, ^andj^and an envelopedrop^^^ 

and the fully-open position shown in FIG. 2 where the door 1S currencjroTsinrilarto interior space 20 within the 

panel is almost horizontal to permit access within the drop safe. The currency acceptors used in an actual embodi- 

interior space 20. ment °f the present invention are made by Mars Electronics 

Adoor control assembly 39, best shown in FIG. 5, permits International, of West Chester, Pa. Although the present 

opening and closing the door assembly 34 in a controlled embodiment utilizes two identical currency acceptors 52 and 

manner. The door control assembly 39 includes a lever 40 30 53 ' u should te understood that drop safes according to the 

pivotably mounted on a post 40a extending outwardly from P resenl invention could have a single such acceptor, or could 

a mounting plate 41 secured to the inside of the right side accommodate more than two acceptors. As seen on the front 

panel 17r of the drop safe. A link 42 is pivotably attached at of lhe door P anel 35 » each a cceptor includes a slot 57 for 

one end 43 of the lever 40 remote from the pivot point of that presenting currency for acceptance, in the manner known to 

lever. The link 42 extends to connect with an attachment 35 me m ' ^ acce P tor draws that bm int0 tfa e slot 57 and 

plate 44 mounted on the inside of the door assembly 34. The examines characteristics of the bill to evaluate its authen- 

piston rod of a gas spring 47 is pivotably attached to the ticity. If the bill passes examination, the acceptor transfers 

other end 48 of the lever 40 remote from the pivot 40a. The mat bm t0 a currency cassette 58 (or 59), FIG. 2, associated 

body of the gas spring 47 is pivotably attached to the plate ^ 1031 acceptor. However, if the bill undergoing exami- 

41 at the end remote from the pivot attachment of the 40a 40 nation fails to meet the criteria for acce P tance > the a cceptor 

lever 40. The control door assembly 39 as described may be partially ejects that bill from the slot 57 and may also emit 

preassembled and then attached to the inside of the right side an audible signal to alert the busy cashier that a bill was 

panel 17 by bolts or other suitable fasteners extending rejected. If an unacceptable biU is so worn that the acceptor 

through the mounting plate 41. cannot ^ il > the a cceptc-r will accept tbat bill to the 

The door assembly 34 is normally locked in the closed 45 ^te and produce a sijmal signifying an unrecognized 

position shown in FIG. 1. The center of mass of that door ^ f d l0Cked ^ I 

assembly in the closed position is slightly behind the pivot d f tachable from the acceptors when the drop safe is opened, 

axis of the hinge block 36, so that the unassisted door a ^wmg an armored-car messenger or other person to 

assembly tends to remain shut upon opening the door lock remove the cassettes and re P lace them mih cassettes 

as described below. The spring force exerted by the gas 50 m minimum l ™e. 

spring 47 through the lever 40 and the link 42 urges the door Those skilled in the art will understand that currency 

assembly open, allowing the door assembly to pivot out- acceptors are progranmed, to use a predetermined algorithm 

wardly in a gradual and controlled manner when the door is or set of bill-scanning parameters for examining bills pre- 

unlocked. As the opening door assembly pivots open to an sented for acceptance. The nature of those parameters and 

intermediate position (not shown), for example, about 15° 55 the programming of bill acceptors are known to those skilled 

from the closed position, the geometry of the lever 40, the m the art and need not be repeated herein. Bills that are 

link 42 connected to the end 48 of that lever, and the gas heavily wrinkled or soiled may be rejected by the acceptors, 

spring 47 connected to the other end of the lever, allow the and those bills must be introduced through the drop slot 

force of the gas spring to counterbalance the gravitational mechanism. 

opening force acting on the door assembly. The door assem- 60 For drop safes according to the present invention and 

bly thus becomes stabilized at the partly-open position. The having two or more acceptors, as in the preferred 

person opening the door may then manually pivot the door embodiment, each acceptor is associated with an indicator to 

down to the fully-open position shown in FIG. 2, where the indicate whether that acceptor is available for use. These 

counterbalancing force applied by the gas spring 47 through indicators for each acceptor in the preferred embodiment are 

the lever 40 is insufficient to raise the door to the previous 65 a pair of LEDs 62 and 63, respectively located above the bill 

intermediate position. The door control assembly 39 thus slots for the acceptors 52 and 53, Each pair of LEDs includes 

permits a controlled opening of the door when the door lock a red LED and a green LED. Those LEDs, or alternative 
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indicator devices as appropriate, are illuminated to tell the respective bolt plates 89a, 89b pivotably mounted on the 

user which acceptor is presently enabled for use. The LEDs back side of the door panel 35 by the pivot pins 90a, 90b. 

for the acceptors 52 and 53 are operated by the control Each bolt plate extends inwardly beyond its pivot pin to an 

processor forming part of the drop safe 16, as described inner end 91a, 916, with those inner ends confronting each 

below. 5 other in close spaced-apart relation as best seen in FIG. 3. 

The envelope drop assembly 54 may be used to insert The bolt plates and other components of the locking mecha- 

currency too wrinkled or damaged to pass through the nism are located on a lock plate 86 forming part of the door 

acceptors, or to insert travelers checks or other bills not assembly 34 and mounted on the back side of the door panel 
suited for the acceptors. The envelope drop assembly 54 

includes an envelope slide 67 extending outwardly through 10 Each inner end 91a, 916 of the bolt plates contains a notch 

a slot-like opening 68 in the door panel to the right of the 94, best seen in FIG. 4. A bushing 95 is loosely retained 

acceptor 53. A window 69 is formed in one side of the slide within the confronting notches 94 of the bolt plates, and the 

. 67 for inserting an envelope or the like, to be 35 transferred bushing is held in place by securement with the upper end 

V_ to the interior of the drop safe. A handle 70 is attached to the of a plate link 96 extending downwardly from the bushing, 

outermost end of the slide 67 for moving the slide into and 15 The bushing 95 has an inner collar 97 configured for a loose 

out of the opening 68 in the door panel. fit within the opposed confronting notches 94. A flange 98 of 

Envelopes or other articles placed in the slide 67 of the greater diameter than the collar extends radially outwardly 

envelope drop assembly rest on a floor 73, as best seen in fr° m tnc collar and locates the bushing at one side of the 

FIG. 7. That floor 73 extends along the bottom of the slide confronting bolt plates 89a, 89b. The bushing 95 is located 

67, between the parallel spaced-apart vertical walls 71 20 against the other sides of the bolt plates by the facing side 

defining the slide. A pin 74 extends loosely through an of me plate link 96, which is secured against the confronting 

opening at the forward end of the floor 73 and engages the end of tbc colIar 97 - Tbe diameters of the collar 97 and the 

sides 71 of the slide. The floor 73 thus is free to pivot in a mating notches 94 in the bolt plates are chosen to provide 

vertical plane around the pin 74. An arm 76 attaches to the some latcral P la Y of lnc bushing, so as to prevent binding as 

forward end of the floor 73, extending upwardly from the 2S me bushing moves up and down while the bolt plates pivot 

floor for a distance and thence extending rearwardly in on me P ivot 90fl > 90 ^ 

substantially parallel relation to the floor. The vertical extent The lower end of the plate link 96 overlies one side of a 

between the floor 73 and the parallel portion of the arm 76, lock cam 100 supported for rotation relative to a dial shaft 

within the slide 67, defines the space for receiving envelopes 101 extending through a central opening 102 in the lock 

or other objects inserted through the window 69 of the slide. 30 cam. A pin 103 extends through an opening near the lower 

The slide 67 extends through the opening 68 in the door end of the plate link 96 and through an aligned opening 106 

panel 35, and is mounted for sliding movement in the m the lock cam 100 > radially displaced from the central 

housing 78 (FIG. 7) fastened to the inside of the right side opening 102. The plate link 96 thus moves up and down as 

panel llr of the drop safe. The housing 78 comprises a pair 35 foe lock cam 100 is rotated about the dial shaft 101. 

of walls 79 and 80 spaced apart to accommodate sliding An outer end of the dial shaft 101 extends through the 

movement of the slide 67 between the panels. The lower end door panel 35 and is secured to the dial 107 on the front of 

81 of the wall 80 closer to the side panel 17r of the drop safe the door panel. The dial shaft 101 passes through the central 

is curved away from that side panel, to deflect toward the opening 102 in the lock cam 100 and is pinned to an opening 

center of the interior space 20 the envelopes or other objects ^ in one end of a cam lever 108, FIG. 4, located behind the 

introduced through the envelope drop assembly 54. lock cam. The cam lever 108 thus is mounted behind the 

The slide 67 is mounted so that the floor 73 engages the lock cam 100 ™ d rotates with the dial shaft 101, on an axis 

surface of a cam 83 mounted between the walls 79 and 80 concentric to that of the lock cam 100. 

comprising the housing 78. The floor 73 rests on the upper The cam lever 108 has an engagement portion 109 

surface of the cam 83 while the slide 67 is withdrawn from 45 extending forwardly into the plane of the lock cam 100. That 

within the housing 78. However, when the slide 67 is fully engagement portion occupies a circumferential cutout 110 

inserted through the slot 68 and into the housing 78, the floor on a peripheral part of the lock cam 100. The angular extent 

73 is moved rearwardly to place the pivot pin 74, about of the circumferential cutout 110 is greater than the corre- 

which the floor pivots, behind the curved upper surface of spending extent of the engagement portion 109 located in 

the cam 83. The floor 73 thus pivots approximately 90° 50 that cutout, so that the cutout and engagement portion 

downwardly, effectively dumping into the housing 78 any provide a lost-motion connection between the cam lever 108 

envelope or the like previously inserted through the window rotated by the dial shaft 101, and the lock cam 100 driven by 

69 of the slide. When the slide 67 is again pulled outwardly the cam lever. The extent of lost-motion in this connection 

from the housing 78, the cam 83 restores the floor 73 to its is approximately 40* in the preferred embodiment, and its 

previous horizontal attitude. This arrangement effectively 55 purpose is discussed below. 

blocks any direct access through the slot 68 to the interior Referring again to FIG. 3, the door bolts 87a, 87b engage 

space 20 within the drop safe, because the floor 73 remains me bars 88a, 88b to lock the door assembly when the link 

horizontal to block any such access through the window 69 p i at e 96 is raised, pivoting the bolt plates 89a, 89b around 

while the slide is pulled even part way out from the door their respective pivot pins 90a and 90b. The lock cam 100, 

panel 35. 60 to which the plate link 96 is attached, is maintained in that 

The locking mechanism for the drop safe 16 is best seen locked position by the lock bolt 114 of a dead bolt mecha- 

in FIGS. 3, 3A, and 4. Looking first at FIG. 3, a pair of door nism 115 mounted on the lock plate 86. The lock bolt 14 is 

bolts 87a, 81b are shown extending outwardly from the left shown extended in FIG. 3, and in that position engages the 

and right edges of the door assembly to engage mating shoulder 116 of the lock cam 100. The lock bolt 114 prevents 

recesses in the bars 88a, 886 secured to the insides of the 65 the lock cam 100 from rotating when the cam lever 108 is 

side panels 17r, 17/ flanking the sides of the closed door. The rotated clockwise by turning the dial 107 to take up the slack 

door bolts 87a, 81b are attached at an outer end of the in the lost-motion connection formed by the engagement 
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portion 109 and the circumferential cutout 110 of the lock 
cam. The door assembly 34 thus remains locked while the 
lock bolt 114 of the dead bolt mechanism remains extended 
as shown in FIG. 3. 

The dead bolt mechanism 115 used in the present cmbodi- 5 
ment of this invention is available from La Gard Inc. of 
Torrance, Calif. Details of this dead bolt mechanism are 
known by those skilled in the art, but it should be understood 
that other dead bolt mechanisms or locking devices may be 
substituted for the specific dead bolt mechanism disclosed 10 
herein. The lock bolt 114 slidably extends from one end of 
a housing 120 that also contains the bolt block 121. A spring 
within the housing 120 urges the lock bolt 114 outwardly 
from the housing 120 to the position shown in FIG. 3. 

A lever 138 located along one side of the housing 120 15 
connects to a shaft 128 operative to extend or withdraw the 
lock bolt 114. Within the housing 120 is a solenoid that locks 
the lock bolt 114 in its extended position when the solenoid 
is unpowered and unlocks the lock bolt when powered. A 
switch within the housing 120 detects the extended position 
of the lock bolt 114. 

Returning now to FIGS. 3, 3A, and 4, a tension coil spring 
139 is connected between the remote end of the lever 138 
and an end 123 of the cam lever 108 remote from the dial 
shaft 101. The coil tension spring 139 attaches to the lever 
138 by a spring loop 140 laterally offset from the coils of the 
spring. 

One end of a torsion spring 143 also is connected to the 
remote end 123 of the cam lever 108. The torsion spring 143 
is positioned on the side of the cam lever opposite to the lock 
cam 100, and the remote end 145 of the torsion spring is 
pivotably anchored at 144 to the lock plate 86. The torsion 
spring 143 provides a toggling action for the cam lever 108, 
as described below. 

The locking mechanism operates in the following manner. 
With the door assembly 34 locked as shown in FIG. 3, the 
dial 107 can be rotated to a relatively limited extent but the 
lock bolt 114 keeps the lock cam 100 from rotating and thus 
maintains the door assembly locked. Opening is initiated by 
actuating the solenoid within the dead bolt mechanism 115, 
thereby freeing the lock bolt of the dead bolt mechanism. 
Control of that unlocking solenoid is discussed below. Once 
the lock bolt 114 is unlocked, an operator may then rotate the 
dial 107 clockwise, imparting the same rotation to the cam 
lever 108. The lock bolt 114 remains extended to block 
rotation of the lock cam 100 at this time, but the engagement 
portion 109 of the cam lever 108 travels through the lost- 
motion cutout 110 in the lock cam at this time. As the cam 
lever 108 rotates clockwise, its remote end 123 applies force 
to the remote end of the lever 138 through the coil spring 
139. The lever 138 withdraws the lock bolt 114 from 
engagement with the shoulder 116 of the lock cam 100. The 
bolt block 114 becomes fully withdrawn from the shoulder 
116 when the engagement portion 109 of the cam lever 108 
reaches the end of the lost-motion connection within the 
cutout 110 of the lock cam. 

Continued rotation of the dial 107 causes the cam lever 
108 to rotate the lock cam 100 clockwise to the position 
shown in FIG. 3A, pulling the plate link 96 down and 60 
pivoting the bolt plates 89a, S9b to withdraw the door bolts 
87a, Hlb from engagement with the mating bars. The finger 
111 extending outwardly from the lock cam 100 moves to 
abut the housing 120 of the dead bolt mechanism 115, as 
seen in FIG. 3 A, when the lock cam is completely rotated 65 
clockwise to the unlocked position. This abutment, together 
with the yielding connection provided by the now-extended 
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spring 139 between the cam lever 108 and the lever 138 
connected to the dead bolt lock, protects the dead bolt lock 
from damage if anyone attempts to force the dial 107 beyond 
its full-unlocked position. Once the door bolts 87a, 876 are 
fully withdrawn, the door assembly 34 becomes unlocked 
and is free to pivot open under control of the door control 
assembly as described above. A tilt switch 147, FIG. 2, is 
attached to the door assembly and provides and electrical 
signal indicating when the door pivots open from the closed 
position. 

The torsion spring 143 acts on the cam lever 108 to resist 
rotation in the clockwise direction, when opening the drop 
safe from the locked position shown in FIG. 3. However, 
that torsion spring toggles to the position shown in FIG. 3 A 
when the cam lever 108 is rotated fully-clockwise to the 
open position, thereby maintaining the locking mechanism 
unlocked while the door assembly is open. When the dial is 
rotated counterclockwise to relock the door mechanism as 
described below, the torsion spring 143 toggles back to the 
position shown in FIG. 3. 

Closing and locking the drop safe is substantially the 
reverse of the opening procedure. After the door assembly is 
pivoted to the fully-closed position, the operator rotates the 
dial 107 counterclockwise, moving the plate link 96 
upwardly and returning the door bolts 87a, 87/> to the locked 
position. It is assumed the solenoid within the dead bolt 
mechanism 115 no longer is powered at this time, so that the 
lock bolt 114 will lock when returned to its extended 
position. The door bolts 87a, Sib preferably move out- 
wardly to abut the bars 88a, SSb when the door is fully 
locked, providing a motion stop that limits the counterclock- 
wise rotation of the lock cam 100 approximately to the 
position shown in FIG. 3 where the shoulder 116 is slightly 
past the path of travel for the lock bolt 114. Continued 
counterclockwise rotation of the dial 107 returns the cam 
lever 108 through the lost-motion connection to the initial 
position shown in FIG. 3, allowing the lock bolt 114 to its 
original position, engaging the shoulder 116 of the cam plate 
100 and again locking the cam plate against clockwise 
rotation. 

The present drop safe preferably operates under pro- 
grammed control to limit access to the drop safe and thus to 
protect cashiers and other employees at locations using the 
drop safe. FIG. 7 schematically shows an embodiment of an 
operational control system for the drop safe. This system 
includes a programmable microprocessor 154 programmed 
to function as a central processing unit (CPU) for the system, 
and connected to a memory 155 for storing the micropro- 
cessor operating program for the drop safe as well as 
information relating to usage of the drop safe. The processor 
154 accepts input signals from the acceptors 52 and 53, the 
dead bolt switch 154 located within the housing 120, the 
keypad 27 of the terminal 26, and the tilt switch 147; and 
sends operating signals to the LEDs 62 and 63 associated 
with the acceptors. The processor 154 also controls opera- 
tion of the dead bolt solenoid 131 located within the housing 
120, the printer 129, and the display 28 (FIG. 1) associated 
with the terminal 26. The processor also controls a signal 
device 156 for alerting a cashier or other operator of selected 
operating conditions. The signal 156 preferably provides an 
audible signal apparent to persons in the immediate vicinity 
of the drop safe, although that audible signal can be sup- 
planted by a visual signal appearing on the display 28 of the 
terminal 26 or elsewhere. The processor 154 and the 
memory 155, together with the power supply and other 
related circuitry, are located on a circuit board suitably 
housed within the interior space 20 of the drop safe and 
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linked by the connector strip 30 to a power source and Moreover, an armored-car messenger may service a particu- 

external components such as the printer 29 and terminal 26. lar drop safe less often than each business day or calendar 

In addition to the keypad 27 and the printer 29, a portable day, so that the deposits removed from a particular drop safe 

microchip memory module known to those skilled in the art may include at least one business day and portions of two or 

preferably is used to extract data stored in the memory 155 5 more other business days. 

relating to currency transfers into the drop safe, and to input By selecting the cashier menu 166, FIG. 8, the display 28 

information for unlocking the safe. For that purpose, the indicates whether single or multiple cashiers were last 

drop safe includes a memory module port 189 (FIG. 7) selected for the drop safe and gives the operator the option 

connected to the processor 154 and incorporated into the of continuing or changing that selection. That selection 

terminal 26 or otherwise accessible from outside the closed 10 normally takes place at the beginning of each work shift in 

drop safe. The memory module port interfaces with a a particular business day. After the operator selects either a 

memory module chip (not shown) carried by the armored- single-cashier or multi-cashier shift at the menu 166, the 

car messenger, programmed to cause the processor 154 to display prompts the operator to eqter^a c ashier number ^ 

transfer selected data corresponding to the contents of the previously selected and entered intomemory ior the par^ 

drop safe at that time. When the messenger delivers the ticular cashier, or cashiers if a multiple-cashier shift has been 

currency cassettes and envelopes to a counting facility at a f Iected * M each number is entered into the keypad 

central location, the memory module chip in turn is used to 27 ' l . he com P ares that nun * er ^ * fo ™ n 

transfer that data to a computer equipped with a memory ^Tu^ T? l ° mnSm tbe nUmberS 

-11 _ t-u r j 1 j 1 match. The processor will return an appropriate error mes- 

module port. This use of memory modules avoids rekeying , v, • ,„ f t A r K* r . 

. , K , * l •_ sa £ e t0 tne display if an entered cashier number is not 

the data from reports printed by the drop safe when the 20 m , hat ma ^ ef 

contents are being removed by the messenger. Memory A . t£Q , , . & t . , 1iri 

, , . b . .. j r . . . ., 1-1 u A submenu 168 under the shift management window 161 

module apparatus as described herein is available from ^ ch m fl cashier for ^ ^ safo durm aQ 

Dallas Semiconductor Corp., Dallas, Tex., under the trade- ongoing shift. That option would be used, for example, when 

mark Touch Memory* . ... * cashier previously selected for the drop safe at the start of 

Operation of the preferred embodiment is now discussed 2 s a shift became sick or was otherwise unavailable to com- 

with reference to the operating menus hierarchy shown in plete the shift, so that another cashier must be selected to 

FIG. 8. It will be understood that manual entry of data or deposit receipts into the drop safe during the remainder of 

other information is accomplished using the keypad 27 of that shift. 

the terminal 26. The memory 155 associated with the The change-acceptor function 169 is another option under 

processor 154 will accumulate and retain certain kinds of 30 the shift management function. This acceptor function 

information, such as the dates and times of currency trans- allows a cashier to select either the left acceptor 52 or the 

fers into the drop safe, the number and dollar Value of each right acceptor 53 as the primary acceptor for receiving bills, 

transfer, and the cumulative total of bills and their dollar Although a default acceptor normally is available under the 

value accepted into the drop safe. It should also be under- supervisor functions as discussed below, the change - 

stood that other kinds of information, such as separate PINs 35 acceptors function 169 allows a cashier to switch acceptors 

identifying a particular store or other site where the drop safe when the preselected acceptor becomes full or otherwise 

is located and the store supervisor or other person authorized fails during a shift. 

to access certain kinds of information stored in memory, or Each acceptor 52 and 53 sends the processor a signal 

to unlock the safe, also are retained in the memory. The indicating each acceptance of a bill, as well as the denomi- 

operation and programming of microprocessors to perform 40 nation of each accepted bill. The processor maintains in 

the described operations are well known in the art and need memory running total counts for the number of bills intro- 

not be explained herein. duced to each currency cassette 58 and 59 attached to the 

Referring now to FIG. 8, several menus are shown which acceptors. The processor also is programmed to compare the 

appear on the display 28 when selected on the keypad 27 by running total number of bills in each currency cassette with 

a cashier or supervisor as indicated at 160 on FIG. 8. In 45 a preselected maximum number of bills for that cassette; 

response to selecting the main menu, the processor 154 those preselected numbers are variable under the supervisor 

prompts the operator to select any one of the four secondary function 162 of the program, as described below in greater 

menu functions shown in FIG. 8. These functions are shift detail. Once the processor determines that the running total 

management 161, supervisor functions 162, collection of bills for a particular cassette 58 or 59 equals the prese- 

(messenger) functions 163 used for authorized opening and 50 lected maximum for that cassette, the processor automati- 

removing the contents of the drop safe, and message dis- cally enables the other acceptor and signals that change by 

plays indicated generally at 164. Details of supervisor func- changing the status of the LEDs 62 and 63 associated with 

tions and collection functions appear in FIGS. 9 and 10, and the acceptors on the front of the drop safe, 

are explained below with reference to those figures. The present drop safe is programmed to end a particular 

It is important that each deposit into a drop safe, whether 55 shift when the operator selects and confirms that function 

by transfer through the acceptors of the present safe or by an 170. The program then prompts the operator to enter the 

^envelope drop, be credit ed to the particular cashier who number of the cashier ending the shift. When that number is 

madeltiaTdeposit. Furthermore, the amount of each deposit; entered, the programmed processor automatically prints a 

together with the date and time of making the deposit, also shift report summarizing information for that shift as 

is important not only for overall accountability but also to 60 described below. 

enable reconciling the deposits to a drop safe with each Because the end of one shift coincides with the beginning 

"business da/* those deposits were made. Many stores of the next shift, the end-shift function 170 immediately 

operate on a business day that does not coincide with a prompts the operator by asking whether the next shift is a 

standard calendar day. Instead, each business day for the multiple -or single-cashier shift. When the operator responds 

store ends at a predetermined time such as 6:00 a.m. 65 by entering the kind of shift, the program prompts the 

However, the contents of the drop safe usually are not operator to enter the appropriate cashier number for that 

removed coincident with the close of the business day. shift. 
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The end-shift function continues by asking whether the 
shift just concluded is the last shift of the business day. If the 
operator enters an affirmative answer to that prompt, the 
processor prints a day report giving particulars of drop-safe 
operation for that entire business day. The drop safe now is 
ready to commence operation in the new shift or day. 

Each shift report and day report presents deposit activity 
for the drop safe during the most recent corresponding 
period of operation. The information in those reports can be 
summary or in detail, as desired by the store or other location 
of the safe. In a preferred embodiment, the shift reports are 
summaries of the drop safe activity during that shift, listing 
by cashier the total amounts of cash transferred to the 
cassettes, and the totals of cash and non-cash envelope drops 
during that shift. The shift report also lists the total number 
of envelopes deposited, and the total number of bills 
accepted but not recognized by an acceptor during that shift. 
Each shift report also may print the ratio of manual-drop 
cash to the cash deposited in the acceptors during the shift. 
Store operators may use this ratio for management purposes, 
for example, producing an alert signal when the ratio of 
manual-drop cash to acceptor-deposited cash exceeds a 
predetermined number. 

Each printed shift report also includes a header identify- 
ing the particular store, the date and time of printing the 
report, a serial number of the shift report, and the name of 
the cashier or other person who printed the report. The date 
and time of the first and last deposit event during that shift 
also preferably appears on the shift report. If the shift report 
is printed during a current shift in response to a supervisor 
function 162 as described below, the shift report also would 
state that the totals thereon are incomplete. 

A complete day report is printed, as mentioned above, at 
the end of the last shift of a business day. A typical day report 
for the present drop safe is an expanded version of the shift 
reports, summarizing by cashier, for each shift during that 
business day, the deposit information as discussed above for 
a shift report. After the detailed summary for each cashier 
during a shift, the day report summarizes the totals for each 
shift. Similarly, a summary of day totals is printed at the end 
of the shift totals for the last shift in that business day. The 
day totals thus summarize the total deposits into the drop 
safe, and the calculated ratios, during that complete business 
day. 

The drop safe 16 preferably has a backup battery (not 
shown) to permit operation of the processor for a reasonable 
time and to open the drop safe during power outages. This 
backup power source allows cashiers to enter information 
concerning envelope drops during a power outage, when AC 
line power is unavailable to operate the acceptors 52 and 53. 
It will be understood that the processor may have a separate 
battery sufficient to maintain information in the memory 155 
for extended times, in accordance with accepted practice. 

Once the operation of a particular shift is established for 
the drop safe, cashiers for that shift can transfer currency 
into the drop safe either through the acceptors or the 
envelope drop. If only a single cashier was previously 
entered as authorized for the shift, that person's name 
remains on the display 28 for the remainder of that shift so 
that the cashier need not enter his or her cashier number for 
each transfer into the drop safe. In that case, the cashier may 
simply present bills to an acceptor any time throughout the 
shift. If multiple cashiers were selected, the individual 
cashier making a deposit must enter the cashier number in 
the keypad 27 before the acceptors will accept a transfer. The 
processor is programmed to time-out the cashier at a pre- 
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determined time (for example, ten seconds) after the cashier 
number is entered or the last bill is presented to the 
acceptors, so that a later deposit by a different cashier on that 
shift will not be mistakenly credited to the cashier making an 

5 earlier deposit into the drop safe. 

The drop safe may be operated so that only a selected one 
of the acceptors 52 and 53 can receive currency until the 
cassette 58 or 59 associated with that acceptor contains a 
predetermined number of bills. The activity status of each 

10 acceptor is indicated to the cashier by the state of the LEDs 
62 and 63 located on the front of the door panel 35, 
associated with each acceptor. For example, if the acceptor 
52 is designated to receive currency until the cassette 58 of 
that acceptor is filled, the green LED of the LEDs 62 for that 

]5 acceptor is illuminated and the red LED of the LEDs 63 
associated with the other acceptor also is illuminated. The 
cashier thus knows to tender all bills for acceptance to the 
acceptor 52 at this time. A running count of the number of 
bills accepted and stored in the cassette 58 (separate from a 

20 running total of the face amount of money represented by 
those bills) is maintained, either in the acceptor 52 or in the 
memory 155 associated with the processor 154. When the 
count of bills accepted for the currency cassette 58 reaches 
a predetermined number corresponding to maximum capac- 

2S ity for that cassette, the processor disables that acceptor and 
enables the other acceptor; the illumination status of the 
LEDs 62 and 63 is also reversed, informing the cashiers to 
make subsequent transfers into the other acceptor 53. If the 
currency cassette 59 associated with that other acceptor also 

30 becomes filled, then the red LEDs for both acceptors are 
illuminated and further currency drops must be made by 
envelopes through the envelope drop assembly 54, until the 
full currency cassettes are replaced with empty cassettes by 
an armoredcar messenger or other authorized person. 

35 The cashier then inserts the first bill in the appropriate 
acceptor. If that bill meets the criteria for acceptance pre- 
viously set in the acceptor, the acceptor transfers that bill to 
the cassette associated with that acceptor. However, if the 
bill fails to meet those criteria, the acceptor ejects the bill 

40 and beeps to alert the cashier. If only a single cashier is 
authorized for a particular shift, the system can keep the 
currency acceptors active for immediate insertion of bills 
during that shift. If multiple cashiers were selected for the 
shift, the processor preferably is programmed to allow a 

45 preset time, such as ten seconds, to elapse after acceptance 
or rejection of a previous bill, during a multiple -cashier 
shift, during which the cashier can insert another bill. If the 
cashier exceeds that preset time, the cashier number must be 
reentered into the keypad before the drop safe will consider 

50 additional bills for acceptance. Another cashier authorized 
for that shift may enter his number to make a deposit at any 
time. 

The currency acceptors used with the present embodiment 
are programmed to accept bills in denominations of $1, $2, 

55 $5, $10, $20, $50, and $100 and provide output signals 
indicating the denomination of each bill accepted. Those 
signals are received by the processor 154 and stored in 
memory, along with the count of accepted bills, so as to 
maintain a running cumulative total of the number and value 

60 of bills accepted throughout the shift and contained in each 
currency cassette. 

If the cashier wants to deposit into the drop safe bills of 
another denomination, bills that were too wrinkled or dis- 
figured for acceptance, or to deposit non-cash items such as 

65 travelers checks, she can press an "Envelope" key provided 
for that purpose on the keypad 27. The display 28 prompts 
entry of the cashier number. The display then prompts entry 
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of ihe cash and non-cash amounts for that drop, and displays acceptor has received the previously-set maximum number 

the entries for acceptance or revision by the cashier. Once of bills. If both acceptors have received their maximum bill 

those entries are completed, the printer 29 prints a ticket capacities, the processor disables both acceptors and signals 

summarizing the entered data and including the date, time, that event by turning the red LEDs 62 and 63 associated with 

and store identification of the drop safe. The cashier may 5 the acceptors. Cashiers must then make further deposits 

then wrap that ticket around the items and secure the through the envelope drop, until the armored-car messenger 

resulting packet with a rubber band, place the packet in the has replaced the full cassettes with empty ones, 

window 69 of the slide 67 associated with the envelope drop Removal of the safe contents is accomplished through the 

assembly, and then move that slide inwardly as described messenger function 163 shown in FIG. 8 and discussed in 

above so that the packet drops from the slide into the interior 1Q detail with reference to FIG. 10. An armored-car messenger 

of the drop safe. will visit the store or other location to collect the safe 

Returning to FIG. 9, the supervisor functions 162 for a contents, and that messenger will know both the numerical 

typical drop safe according to the disclosed embodiment are combination for the particular drop safe and also a messen- 

detailed. When the supervisor functions are selected from S er PIN uni que 10 that P^ 0 - Preferably, the messenger will 

the main menu, the display 28 requests entry of a supervi- 15 carry an electronic key in the nature of a memory module 

sor's PIN as shown at 173. Once a PIN is entered and chip as described above. As part of the content removal 

verified by reference to an authorized PIN previously stored ^ nctlon > » closul S t c ° ntent re P ort / s ? n ** f 6escr f lb ^ 

. . J ■tee *i» jt c j- 1 a below, to document the present contents of the drop safe for 

in the memory 155, the drop safe displays secondary menu . . , T r , . r 

- . ■ j 1 _ / ■ nrvy the store supervisor and for the armored-car service, 

functions including a read-only report function 174, a PIN ^. . . % ■ . j u 1 ^ . < 

? / ,v,. A 1 _i TPt . Content removal is initiated by selecting the content- 

management function 275, and a utilities function 176. If the 20 rcmoval m ^ ^ ^ mcmj qd the 

read-only reports function is selected, the operator is pre- ^ 2g ^ ^ ^ tQ 

sented with the choices of printing a day report, a shift enUr fais Qr hef Qumber as shown at m ^ 10) 

report, or a content report for the drop safe. Details of day so mat me name of the preseQt at the remova , 

reports and shift reports are discussed above. If the super- ^oH be prm ted on the closing content report. After an 

visor selects a shift report for printing, the display asks 25 authorized cashier number is entered, the display prompts 

whether the report is for the current shift or for an old shift. the cashier to enter the store PIN. After that number is 

If the operator selects an old shift, the system then prompts entered and verified by the processor, the display then 

entry of the number for the shift. This number is determined prompts to chose the particular access method for opening 

in reverse serial order from the number of the current shift. me safe, as indicated at 180. The two available access 

Thus, if the current shift is shift number 3 as determined by 30 methods with the disclosed embodiment are by electronic 

data stored in the processor, the immediate -past shift was key as indicated at 181, or by manually entering the access 

shift number 2 and entering that shift number causes the C0£ j cs on the keypad 27, indicated by the step 182. If the 

processor to print a shift report for that shift. The words messenger is carrying a memory module chip, the 

"Report Reprint" will appear on this printed shift report, electronic-key function 181 is chosen and the messenger 

indicating that the shift report is not the original report that 35 presents that memory module to the memory module port 

was printed at the close of the old shift, as discussed above. \gg located on the terminal 26. If the keypad function 182 

However, this reprinted shift report also will contain the ^ chosen, the display prompts entry of the messenger PIN 

words "Totals Complete" or equivalent, indicating that the f or confirmation by the processor. Once the proper messen- 

totals on the reprinted report cover the entire time of that ger pin is entered, the display prompts the messenger to 

shift. 40 enter the numerical combination predetermined for that 

Selecting the PIN management function 175 allows the particular safe and stored in memory. If the processor 
supervisor to change, add to, or delete the identification verifies that the messenger entered the proper combination 
numbers of employees authorized for a store or other or if the correct memory module key was inserted, the dead 
location containing the particular drop site. The supervisor bolt solenoid 131 is actuated to enable opening the lock 
also has the option of changing the PIN previously entered 45 mechanism as discussed above, and the acceptors are dis- 
for the particular store (and used for opening the safe), abled from accepting bills until content removal is corn- 
changing the supervisor PIN, or printing a list of employees pie ted as described below. Unlocking is acknowledged by a 
and their identification numbers currently authorized to use display message stating that admission is granted and 
the particular drop safe. prompting the messenger to open the door to the drop safe. 

The utilities function 176 allows setting various param- 50 The messenger opens the door by turning the dial 107 and 

eters not elsewhere considered. These include the option of then swinging the door downwardly to its maximum extent 

setting the date and time maintained in the internal clock of as described above. If the processor does not receive a signal 

the processor and printed on the various reports, and enter- from the tilt switch 147 that the door has been opened within 

ing the identification number of the particular store where a predetermined time after admission is granted, the proces- 

the drop site is located. This store identification, which 55 sor disables the dead bolt solenoid to relock the door. At that 

should not be confused with the store PIN mentioned time, the display presents the messenger with the option of 

previously, will appear on each report printed by the drop reopening the safe or aborting removal of its contents, 

safe and correlates those reports with the particular store. Selecting the abort function terminates the contentremoval 

The utilities function 176 also allows the supervisor to procedure and returns the display to the main menu, 

change the default acceptor, or to select both acceptors for 60 If the particular drop safe is equipped with a memory 

entry of bills. Another acceptor- related utility function module port 189 as described above, the messenger's PINs 

allows setting the maximum number of bills per cassette for for one or more drop safes on a route can be recorded on the 

each acceptor. The ability to set that function is important memory module key carried by the messenger. Each 

because the acceptors currently in use can accommodate memory module chip also stores a unique serial number 

cassettes of different bill-holding capacities. By entering the 65 identifying that particular chip. The messenger in that case 

maximum number of bills for each cassette, the processor need only place the memory module key in data com muni - 

automatically switches to the second acceptor when the first cation with the port 189 to access the safe. 
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Armored -car messengers servicing drop safes usually FIG. 11 illustrates a typical example of drop-safe collec- 

arrive at each location carrying a pair of empty currency lions overlapping different days. That figure shows four 

cassettes in a scalable bag. Each empty cassette is locked consecutive business days and two collections spanning 

and sealed, and each seal bears a unique number affixed at pans Q f those four days. The first collection occurs approxi- 

a central location. When the messenger unlocks and opens 5 m ately midway during the second business day and covers 

the safe door, the display 28 prompts the messenger to enter a that began soon after the first business day com- 

the seal numbers of the new cassettes into the keypad 27, as m enced. The second collection occurs during the fourth 

shown at 184. Those cassette seal numbers are stored in business day. That collection thus covers the remainder of 

memory and will be reported when the messenger removes me second business day and the entire third business day, as 

the cassettes in a subsequent trip to that location; the seal 10 weU ^ a beginning portion of the fourth business day. 

numbers for the cassettes now in the safe were entered at the „_ . ^ A ^ c . c t , , 

c . c AiU . , . The closing content reports for the first and second 

most recent prior servicing of the safe. After the second seal .... & ., . , . . . f m c 

, . \ , . ,. & . 4 . „ collections, considered together, contam information tor the 

number is entered, the display prompts the cashier to remove j j i_ • j « 

* .u . . .uj complete second and third busmess days. However, those 

the cassettes from the acceptors, to remove the drop enve- r .. . ^ t , ,. , , 

. . . c r c , . . j t i fu r two collection reports must be combined with preceding and 

lopes or packets from the safe, and to close and lock the safe , r . 4 r l4 ?. 

, r _ r . . , „ . . , 15 subsequent collection reports to provide a complete picture 

door. The messenger places the removed cassettes in the bag, f - M t . - tt y c t *\ - . , . / 

... i .u i r of safe operations for the first and fourth busmess days, 

and the cashier places the unsealed packets or envelopes into r 

the same bag and affixes a numbered seal to the closed bag. ^ deposit-day summary for the closing collection report 

To further increase the efficient operation of drop safes °J th * firet <^ction day will indicate day totals only for the 

according to the present invention, each cassette can have a 20 $"t busi ° ess ***** las * ( and ™W ^smess day to close 

permanent barcode label and be sealed with a seal having a durmg the time of that fi^t collection. When the closing 

unique seal number barcoded onto the seal. The barcodes for report is printed for he second collection, that 

each empty cassette and its seal are read at the central [ e P orl conta * n d **°? t d \ y totals for the second and third 

location, and those barcodes are again read when the cas- business days but not for the fourth busmess day (which 

settes are returned to that location for counting the money. 25 * nded [h * * ec ° nd coUection). Moreover, the deposit- 

TOs arrangement verifies the identity of each cassette leav- da * tot u al f< > r f he th ^ d busi ° ess da y wlU «^w totals identical 

ing and reUirning to the central counting location. to the breakdown by date for that business day because the 

r~ -i r+A~ . . i . ... second collection period spanned the complete third busi- 

The tilt switch 147 again signals the processor when the , r r 

safe door assembly 34 is returned to its upright position, y ' 

signaling closure of the safe, and the dead bolt switch 134 30 U should now be understood that the information collect- 
likewise signals that the door to the drop safe is closed and m S and reporting capabilities of the present drop safe permit 
locked. When the processor receives those signals, the deposits by different cashiers, occurring during different 
display prompts the messenger to enter the number of the shifts and over different business days, without the need of 
seal placed on the bag by the cashier or store supervisor, as physically tagging those deposits for later identification 
shown at step 185. Once that number is entered into the 3 5 whUe counUn g and reporting the contents of the safe. The 
keypad, the drop safe automatically prints a closing content contents of drop safes according to the present invention are 
report for that drop safe, as shown at 186. This closing removed with greater efficiency and security, because the 
content report may contain the summary information dis- bulk of the deposits to the drop safe usually are in cassettes 
cussed above for the read-only content report, in addition to that are locked and sealed, and readily removable by the 
printing the seal numbers entered for the first and second 4 o messenger for transport to a money counting location. The 
cassettes and for the bag seal. The closing content report thus dr0 P safe itself provides information reports that can be 
summarizes the contents of the drop safe by the first and verifled at th e counting center, and cross-checked against the 
second cassettes and by envelopes, and also provides a da y mz]s to P rovide 10 accurate and complete picture of 
summary breakdown of that information by the date of each deposits made to each drop safe by business day. Moreover, 
business day when the safe deposits occurred. The report 45 most biUsshould be in the cassettes removed from the safe, 
also prints the name of the store person who initiated the and *™ prestacked for easier mechanized counting. The cash 
content removal, and the serial number of the memory receipts thus are more readily credited to the store accounts, 
module key, if any, used to open the safe. The processor at a lesser cost for handling and counting those receipts, 
zeros out the content totals for that collection after preparing The message function 164 (FIG. 8) under the main menu 
the closing content report. Once the content removal from 50 160 allows the processor to present various preprogrammed 
the drop safe is completed, the processor returns the display messages to the user of the drop safe. This function will be 
to the main entry screen and enables the acceptors for familiar to one of ordinary skill in the art. Examples of such 
receiving further deposits. messages alert the user to an AC power outage, or the 
The printed closing content report preferably also printer, 29 being offline. The system is programmed to 
includes deposit totals for each business day that closed 55 announce the presence of such messages by emitting a beep 
since the last pickup from the drop safe. Those daily deposit through the audio signal 156, prompting the user to view the 
totals will not be the same as the breakdowns by business message by selecting the message function 164 on the main 
day summarized elsewhere on the closing report, unless at menu. 

least one complete business day elapsed since the safe The operation of the drop safe as described thus far relies 

contents were last picked up before the present content 60 on the memory and judgment of cashiers or store managers 

removal. However, the printed deposit-day totals should in deciding when to transfer cash from a register or other 

equal the sum of the segments of each business day sum- point-of-sale (POS) terminal to the drop safe. For security 

marized in all the content reports containing all portions of purposes, cash exceeding some predetermined amount 

that business day, and the information thus is important for should be transferred from cash drawers to the drop safe, but 

the armored-car service responsible for collecting deposits 65 a cashier who is busy with customers or otherwise preoc- 

from the drop safe and giving proper credit of those deposits cupied may not make timely transfers to the drop safe. This 

by business day and by store. problem can be overcome with a modification of the drop 
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safe, as shown in FIG. 7. Assuming the drop safe is used in 
conjunction with one or more POS terminals 191 capable of 
producing signals that indicate the total volume of sales 
transactions over a particular time, those signals are trans- 
ferred from the POS terminal to the processor 154 of the 5 
drop safe by the data line 190. The processor of the modified 
drop safe also preferably provides data output signals to a 
modem 192 capable of selective connection to a conven- 
tional dial-up telephone line. 

The processor 154 is programmed to calculate the 10 
difference, from a particular starting time such as the begin- 
ning of a shift, between the total sales transactions at the 
POS terminal 191 and the total amount deposited into the 
drop safe through the current time as indicated by data in the 
memory 155. If the calculated difference exceeds a certain 15 
amount previously determined as the maximum amount 
desired in the POS cash drawer, the processor 152 actuates 
the audible signal 156, alerting the cashier of the need to 
transfer funds from the POS terminal into the drop safe. As 
those funds are transferred to the drop safe as described 20 
above, the increase in the cumulative amount of funds 
transferred to the drop safe decreases the difference between 
the POS receipts and that cumulative amount, causing the 
processor 154 to turn off the signal 156 when that difference 
drops below a previously-determined amount. In this way, 25 
cashiers and other operators are reminded to transfer funds 
to the drop safe, preventing accumulations of currency at the 
POS terminal that could tempt robbers and increase losses to 
the store operator. In a preferred use of the drop safe, 
cashiers should transfer funds to the drop safe without 30 
waiting for a reminder signal. 

If no transfer of cash to the drop safe occurs within a 
certain time after the processor 154 issues an alert as 
mentioned above, or if another operating parameter such as 
the ratio of manual/acceptor cash deposits, as may be caused 35 
by excessive manual drops, falls outside a predetermined 
threshold, the processor 154 is programmed to communicate 
that occurrence to an outside supervisor or area manager. 
This is accomplished in the disclosed embodiment by sig- 
naling the modem 192 to dial a predetermined telephone 4 q 
number and^present a predetermined message when that 
number answers. Area managers frequently travel outside a 
fixed office and carry beepers to remain in touch. 
Accordingly, the processor 154 may be programmed to call 
the beeper number for an area manager, and to send a 45 
predetermined alphanumeric code indicating that particular 
event for the calling store. When the supervisor receives that 
message via beeper, the supervisor then can call the store 
manager or cashier to inquire why funds are not being 
transferred from the POS terminal to the drop safe or why 50 
another operating parameter is out of range. The supervisor 
also can verbally tell the store manager the particular code 
displayed on the beeper, and the store manager can enter that 
code on the keypad 27 of the drop safe. The processor 154 
is programmed to deactivate the signal 156 in response to 55 
entry of that code. 

The processor 154 can also be programmed to produce a 
local alert or to communicate by modem to an armored-car 
messenger service, in response to the transfer of currency 
exceeding a predetermined amount into the acceptor cas- 60 
settes. The amount of currency so transferred is accumulated 
by the processor and compared with the predetermined 
amount, so that an alert signal can summon the messenger 
to replace the cassettes before the cassettes of all acceptors 
become filled to capacity. 65 

Drop safes according to the present invention are adapt- 
able to the locations having more than one POS terminal or 
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cash register. For example, a main drop safe including a 
processor 154 and acceptor, such as described herein, can be 
operationally combined with one or more remote drop safes 
157 (FIG. 7) having, at a minimum, one currency acceptor. 
Those remote drop safes, however, lack processors of their 
own and instead are connected to and controlled by the 
processor in the main drop safe. The remote drop safes in 
effect are slave units placed near the separate POS terminals 
for convenient transfer of currency from those terminals, but 
operating under control of the processor in the main drop 
safe. That processor thus provides data collection and report- 
ing functions for the main drop safe and for the auxiliary 
drop safes connected thereto. 

A drop safe according to the present invention can be 
modified to operate in conjunction with a change dispenser. 
For example, such a dispenser call be preloaded with rolls of 
coins in various denominations and connected with the 
processor of the drop safe. When the store clerk transfers a 
$10 bill (for example) into the drop safe and enters the 
proper instruction into the terminal, the processor signals the 
change dispenser to dispense one or more rolls of coins 
which the clerk can use in making change. The various 
reports of drop-safe operation would include the particulars 
of coins thus dispensed to the cashiers. 

It should be understood that the foregoing relates only to 
preferred embodiments of the present invention, and that 
numerous changes and modifications therein may be made 
without departing the spirit and scope of the invention as 
defined in the following claims. 

What is claimed is: 

1. A method of depositing funds into a drop safe at various 
times throughout at least one predefined business day and 
then collecting those funds from the safe at the ends of 
collection periods that include deposits made during parts of 
at least one such business day not coincident with the 
collection period, comprising the steps of: 

depositing funds into the safe at various times throughout 
at least one business day that does not coincide with a 
collection period; 

for each deposit into the safe, storing data in a computer 
memory associated with the safe to identify the amount 
of that deposit and the business day of the deposit; 

removing from the safe the funds deposited into the safe 
in a collection period since the safe was last empty; and 

at the end of said collection period, identifying from the 
stored data the total amounts deposited into the safe for 
each complete business day, if any, during said collec- 
tion period and the total amounts deposited into the safe 
during each partial business day during said collection 
period to produce a closing content report for said 
totals, so that the aggregate of the partial and complete 
business day totals equals the total amount deposited 
into the drop safe during said collection period. 

2. The method as in claim 1, comprising the further step 
of: 

combining the amounts of funds identified for a particular 
partial business day during that collection period with 
amounts of funds identified for the same business day 
during all other collection periods including other por- 
tions of that business day, 

so that the combined partial amounts identified for the 
particular business day correspond to the total funds 
deposited into the safe for that particular business day. 

3. The method as in claim 1, wherein: 

the step of storing data for each such transfer of funds into 
the safe comprises storing the data in a computer 
memory associated with the safe; and 
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the step of identifying the amounts for the full and partial 
business days comprises 

recalling stored data from the memory at the time of 
each removal of funds from the safe to classify 
deposits by the date of each business day when the 5 
deposits occurred; and then 

using the classified deposits from at least two removals 
from the safe to identify the complete funds for each 
business day comprised of partial business days 
during those removals. 10 

4. The method as in claim 1, including the steps of: 
reporting by each partial business day and each complete 

business day during that collection period the total 
amounts deposited in the safe; and 
reporting the total amounts deposited in the safe during 15 
each partial business day and each complete business 
day ending during that collection period. 

5. The method as in claim 1, including the steps of: 
depositing at least some of the funds into a cassette 2Q 

removably located within the safe and having a security 

number associated therewith; 
storing the security number into a computer memory 

associated with the safe; and then 
at the time of removing the funds from the safe removing 25 

the cassette containing the funds deposited therein; and 
retrieving the security number from the memory and 

reporting the security number of the removed cassette 

with a report of the funds removed from the safe within 

that cassette. 30 

6. The method as in claim 1, wherein: 

the step of depositing funds comprises presenting cur- 
rency to a currency acceptor for acceptance to the safe 
and production of the signals identifying the amounts 
of the accepted currency; 35 

manually depositing into the safe currency rejected by the 
currency acceptor, and 

manually entering into a data entry device associated with 
the safe the denomination of the currency manually 40 
deposited into the safe, so as to produce the signals 
identifying the amounts of the manual deposits. 

7. A method of depositing funds into a drop safe at various 
times throughout at least one predefined business day and 
then collecting those funds from the safe at the end of 45 
collection periods that may cover deposits made during 
more than one such business day, comprising the steps of: 

depositing funds into the safe at various times throughout 
at least one business day; 

the step of depositing funds comprising presenting cur- 50 
rency to a currency acceptor for acceptance to the safe, 
and production of signals identifying the amounts of 
the accepted currency; 

manually depositing into the safe currency rejected by the 
currency acceptor; and 55 

manually entering into a data entry device associated with 
the safe the denomination of the currency manually 
deposited into the safe, so as to produce signals iden- 
tifying the amounts of the manual deposits; 6Q 

for each such deposit into the safe, storing signals iden- 
tifying the amount of the deposit and the business day 
of the deposit; and then 
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removing from the safe the funds deposited into the safe 
in a collection period since the safe was last empty; 

at the time of such removal, identifying from the stored 
signals the total amounts deposited into the safe for 
each complete business day, if any, during that collec- 
tion period and the total amounts transferred into the 
safe during each partial business day during that col- 
lection period; and 

using the stored signals to compute a predetermined 
relation between the manually-entered deposits and the 
deposits accepted by the currency acceptor; 

comparing that computed relation with a stored signal 
corresponding to a certain threshold value for that 
relation; and 

producing an alarm condition when the computed relation 
crosses the threshold value. 

8. The method as in claim 7, wherein the step of produc- 
ing an alarm condition comprises: 

producing an alarm detectable at the location of the safe; 
and 

sending a paging Signal operative to activate a paging 
receiver remote from the location of the safe. 

9. A method of depositing funds into a drop safe at various 
times throughout at least one predefined business day and 
then collecting those funds from the safe at the ends of 
collection periods that may cover deposits made during parts 
of at least one such business day not coincident with the 
collection period, comprising the steps of: 

depositing funds into the safe at various times throughout 
at least one business day; 

for each such deposit into the safe, storing signals iden- 
tifying the amount of the deposit and the business day 
of the deposit; 

removing from the safe the funds deposited into the safe 
in a collection period since the safe was last empty; 

at the end of said collection period, identifying from the 
stored signals the total amounts deposited into the safe 
for each complete business day, if any, during said 
collection period and the total amounts deposited into 
the safe during each partial business day during said 
collection period to produce a closing content report for 
said totals, so that the aggregate of the partial and 
complete business day totals equal the total amount 
deposited into the drop safe during said collection 
period; 

the step of storing data for each such transfer of funds into 
the safe comprising storing the data in a computer 
memory associated with the safe; and 

the step of identifying the amounts for the full and partial 
business days comprising recalling stored data from the 
memory at the time of each removal of funds from the 
safe to classify deposits by the date of each business 
day when the deposits occurred; and then 

using the classified deposits from at least two removals 
from the safe to identify the complete funds for each 
business day comprised of partial business days during 
those removals. 
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